Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa
File:                     42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa (raw, json)
Hash identifier:          4dJMQzvw/e4XThKOTzTnYkrxaiyoE8lwQYZlOBvjg5U=
Subject key identifier:   6D:FC:CB:31:A5:5C:F3:97:15:0F:54:92:BF:81:49:93:1B:42:7D:DB
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AC9DBA5C6FE80DD614B998100
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     394089
IP address blocks:        165.85.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a5:c6:fe:80:dd:61:4b:99:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=3b2a7b13-68e8-4c01-beb2-9b57f096c3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:cb:e6:1a:69:59:99:fe:8b:5b:0d:a6:25:
                    bf:29:5c:82:04:e1:d9:38:1c:08:80:c0:05:f4:60:
                    3d:db:29:29:98:cc:ec:9e:6d:26:2c:9d:7d:3e:8e:
                    68:61:dd:77:b9:81:a5:e5:f6:4d:cf:05:2e:b3:fe:
                    31:39:f6:4c:63:64:6d:98:85:1c:ae:6f:64:94:42:
                    30:d1:62:1f:d1:40:b3:30:17:34:c1:22:20:36:e7:
                    9f:98:c5:df:df:f0:fb:91:62:d2:3e:2d:03:6e:52:
                    fc:7e:1a:3e:51:a6:2c:10:c6:d4:e2:38:11:10:73:
                    88:6c:56:6f:37:f2:00:1d:b9:bc:6b:b8:45:4f:66:
                    1d:0b:1d:8d:ef:ee:11:f0:98:d8:a3:15:9b:39:a8:
                    5b:a7:39:53:92:44:8c:39:20:b1:e7:38:2b:7e:87:
                    ed:cd:76:e0:9a:ea:5d:df:f1:05:53:91:1d:08:00:
                    e0:74:66:fb:ff:e1:85:05:07:da:c6:9c:95:41:19:
                    60:e1:a1:6e:e1:81:45:7f:cf:98:08:c8:9d:3b:dc:
                    e9:a5:5d:46:f6:e8:27:ef:af:a3:b0:ef:3e:e0:77:
                    ab:98:93:f7:02:b7:c2:d7:50:10:b8:df:68:90:4d:
                    ba:b0:68:7d:90:3b:73:6e:6c:8b:81:e7:ef:ae:55:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:CB:31:A5:5C:F3:97:15:0F:54:92:BF:81:49:93:1B:42:7D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/42b93bab-5b45-3cb6-943a-f35b4ca137bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:20:c5:21:b4:cf:f3:b0:69:aa:4b:3d:1e:98:1f:37:e6:88:
         66:54:b6:58:3e:d5:a6:76:46:8c:39:ac:3e:0f:17:a0:9b:8f:
         40:c8:20:33:47:ae:cf:60:c5:55:3a:37:73:e2:7b:11:c7:46:
         28:cc:32:70:be:ed:a1:ba:8a:6a:be:2e:57:2e:51:d3:40:8e:
         65:a7:d1:78:f7:e2:08:15:f4:ca:82:c1:aa:08:68:90:e9:f8:
         37:fa:5c:45:8d:8b:c0:b6:03:e2:8b:22:85:ca:b6:01:9e:90:
         2a:e0:6b:6d:82:c6:8f:3e:12:63:b2:ad:97:58:5b:54:14:f5:
         aa:70:d0:88:92:88:05:99:7e:64:a8:cf:d3:ff:17:8a:0f:ac:
         95:5f:27:d7:1b:36:b3:75:41:df:60:ce:0f:69:f3:26:b0:af:
         88:f7:b0:63:98:17:95:cd:88:8c:bd:a8:6c:fb:6a:59:12:26:
         70:9b:2c:27:1e:61:12:18:e0:51:42:5f:05:05:63:ac:8b:19:
         8c:bc:23:0b:b9:61:c0:d1:76:2f:4e:14:38:1a:38:38:b5:44:
         20:48:1d:5c:8c:04:17:24:11:17:a3:5e:f1:3a:15:c2:fe:0e:
         a9:71:07:8c:ca:da:6f:6a:4e:f7:0c:1d:81:c0:45:2f:75:e6:
         f2:86:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:16 2025 by rpki-client